added a user model with password